
United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark OfQce 
Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. 


FILING DATE 


FIRST NAMED INVENTOR 


ATTORNEY DOCKET NO, 


CONFIRMATION NO. 


09/655,229 


09/05/2000 


Chung Nan Chang 


2174 


7777 



7590 01/18/2005 

Donald E Schreiber 

Donald E Schreiber A Professional Corp. 

Post Office Box 2926 

Kings Beach, CA 96143-2926 



EXAMINER 



CHEN, SHIN HON 



ART UNIT 



PAPER NUMBER 



2131 

DATE MAILED: 01/18/2005 



Please find below and/or attached an Office communication concerning this application or proceeding. 



PTC 90C (Rev 10/03) 



Office Action Sumniarv 


Application No. 

09/655,229 


Applicant(s) 

CHANG, CHUNG NAN 


Examiner 

Shin-Hon Chen 


Art Unit 

2131 





- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for R ply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In ho event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )^ Responsive to comnnunication(s) filed on 12 July 2004 . 
2a)S This action is FINAL. 2b)n This action is non-final. 

^ 3)\3 Since this application is in condition for allowance except for formal nnatters, prosecution as to the merits is 
closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) n Claim(s) is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) S Claim(s) 1-29 is/are rejected. 

Claim(s) is/are objected to. 

S)\Z\ Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9)n The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: 3)0 accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) K The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)n All b)n Some * 0)0 None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) □ Notice of References Cited (PTO-892) 

2) n Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) □ Infomiation Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Matl Date . 



4) n Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) O Notice of Infomrial Patent Application (PTO-152) 

6) □ Other: . 



U.S. Patent and Trademartt Office 
PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail Date 200501 12 



Application/Control Number: 09/655,229 
Art Unit: 2131 



Page 2 



DETAILED ACTION 

1 . Claims 1 -29 have been examined. 

Oath/Declaration 

2. The oath or declaration is defective. A new oath or declaration in compliance with 37 

CFR 1.67(a) identifying this application by application number and filing date is required. See 

MPEP §§ 602.01 and 602.02. 

The oath or declaration is defective because: 

It does not identify the citizenship of each inventor. 

It does not identify the city and either state or foreign country of residence of each 
inventor. The residence information may be provided on either on an application data 
sheet or supplemental oath or declaration. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1-29 are rejected under 35 U.S.C. 102(b) as clearly anticipated by Crandall U.S. 
Pat. No. 5805703 (hereinafter Crandall). 

As per claim 1, Crandall discloses a protocol for cryptographic communication via a 
communication channel "I" in which a sending cryptographic imit "S" transmits onto the 
communication channel I an encrypted ciphertext message "M" obtained by supplying both a 
plaintext message "P" and a cryptographic key "K" to a first cryptographic device, and in which 
a receiving cryptographic unit "R" receives the ciphertext message M from the communication 
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channel I and by supplying the ciphertext message M together with the key K to a second 
cryptographic device decrypts the plaintext message P therefrom (Crandall: summary: 
conventional cryptographic communication), a method by which the units S and R mutually 
establish a cryptographic key K by first exchanging messages before the sending unit S transmits 
the ciphertext message M comprising the steps of 

a. the receiving unit R transmitting for storage in a publicly accessible repository a 
plurality of public quantities (Crandall: column 20 lines 15-24 and figure 12: store publicly 
known information); 

b. the sending unit S: 

i. retrieving the plurality of public quantities from the publicly accessible 
repository (Crandall: column 13 lines 18-30 and figure 12: the sender uses pubKc storage 
information to generate key); 

ii. using at least some of the plurality of pubUc quantities, computing and 
transmitting to the receiving unit R a plurality of sender's quantities (Crandall: column 
19: lines 42-48: plurality of sender's quantities are ciphertext message and signature); and 

iii. using at least one of the plurality of public quantities, computing the key K 
(Crandall: column 13 lines 18-30); and c. the receiving unit R, using at least one of the 
plurality of sender's quantities received from the sending unit S computing the key K 
(Crandall: figure 12 and column 20 lines 42-52: the using sender's public key to compute 
deciphering key). 
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As per claim 2, Crandall further discloses the method of claim 1 wherein the receiving 
unit R, in storing the plurality of pubhc quantities into the publicly accessible repository 
(Crandall: column 20 lines 15-24: stores publicly known information): 

i. selects at least one receiver's secret quantity (Crandall: column 8 lines 16-20 and figure 
3: receiver's public key is produced by using its private key); 

ii. selects for storage in the publicly accessible repository as part of the plurality of public 
quantities at least one selected pubhc quantity (Crandall: column 15 lines 28-33); and 

iii. using the receiver's secret quantity and the at least one selected public quantity, 
computes and stores in the publicly accessible repository as part of the plurality of public 
quantities a plurality of coniputed public quantities (Crandall: column 15 lines 34-38 and column 
8 lines 16-20). 

As per claim 3-5, Crandall further discloses the method of claim 2 wherein the plurality 
of pubhc quantities/computed public quantities/selected public quantity include a pluraUty of 
vectors (Crandall: column 20 lines 15-24: sender's and receiver's public keys and curve 
parameter.., etc. ; column 8 lines 8-42: how public keys are generated). 

As per claim 6, Crandall further discloses the method of claim 2 wherein the sending unit 
S, in computing the plurality of sender's quantities for transmission to the receiving unit R 
(Crandall: column 19 lines 42-48 and figure 12: ciphertext and signature are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the sender's 
private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of public 
quantities, computes for transmission to the receiving unit R the plurality of sender's quantities 
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(Crandall: column 13 lines 18-30: generate enciphering key to encipher the plaintext; column 19 
Unes 42-48 and figure 12: ciphertext and signature are sent to the receiver as pluraHty of 
quantities). 

As per claim 7, Crandall further discloses the method of claim 6 wherein the plurality of 
sender's quantities include a plurality of vectors (Crandall: column 19 Hues 42-48: the signature 
(u,P) is sent to the receiver; column 16 - column 17: two points on the curve; column 8 lines 35- 
36: form an abelian group). 

As per claim 8, Crandall further discloses the method of claim 1 wherein the sending unit 
S, in computing the plurality of sender's quantities for transmission to the receiving unit R 
(Crandall: column 19 lines 42-48 and figure 12: ciphertext and signature are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the sender's 
private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of public 
quantities, computes for transmission to the receiving unit "R" the plurality of sender's quantities 
(Crandall: column 13 lines 18-30: generate enciphering key to encipher the plaintext; column 19 
Unes 42-48 and figure 12: ciphertext and signature are sent to the receiver as plurality of 
quantities). 

As per claim 9, Crandall further discloses the method of claim 8 wherein the plurality of 
sender's quantities include a plurality of vectors (Crandall: column 19 lines 42-48: the signature 
(u,P) is sent to the receiver; colimm 16 - column 17: two points on the curve; column 8 lines 35- 
36: form an abelian group). 
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As per claim 10 and 19, Crandall discloses a system adapted for communicating as an 
encrypted ciphertext message M a plaintext message P that has been encoded using a 
cryptographic key K, the system comprising: 

a. a communication channel I adapted for transmitting the ciphertext message M 
(Crandall: summary: conventional cryptographic communication); 

b. a pair of transceivers that are coupled to said communication channel I, and that are 
adapted for communicating the ciphertext message M from one transceiver to the other 
transceiver via said communication channel I (Crandall: summary: conventional cryptographic 
communication); and 

c. a pair of cryptographic: units each of v^hich is respectively coupled to one of said 
transceivers for transmitting the ciphertext message M thereto or receiving the ciphertext 
message M therefrom (Crandall: summary: conventional cryptographic communication), each 
cryptographic unit: 

i. when the cryptographic unit is to receive the ciphertext message M: 

(1) storing plurality of public quantities in a pubhcly accessible repository 
(Crandall: column 20 lines 15-24 and figure 12: store publicly known 
information); 

(2) receiving via the communication channel I a plurality of sender*s 
quantities from a sending cryptographic unit (Crandall: column 19: lines 42-48 
and figure 12: plurality of sender's quantities are ciphertext message and 
signature), and using at least one of the plurality of sender's quantities in 
computing the key K (Crandall: column 13 lines 18-30); and 
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ii. when the cryptographic unit is to send the ciphertext message M, retrieving the 
plurality of public quantities from the publicly accessible repository (Crandall: column 13 
lines 18-30 and figure 12: the sender uses public storage information to generate key) and 
using: 

(1) at least some of the plurality of public quantities in computing the 
plurality of sender*s quantities which the sending cryptographic unit transmits via 
the communication chaimel I to the receiving cryptographic unit (Crandall: 
column 19: lines 42-48: plurality of sender's quantities are ciphertext message 
and signature); and 

(2) at least one of the plurality of public quantities in computing the key K 
(Crandall: column 13 lines 18-30) ; and 

iii. including a cryptographic device having: 

(1) a key input port for receiving the key K from the cryptographic imit . 
(Crandall: figure 12 and column 20 lines 25-41: the cryptography device is 
provided the key); 

(2) a plaintext port (Crandall: figure 12 and column 20 lines 25-41: the 
cryptography device is provided key along with plaintext): 

(a) for accepting the plaintext message P for encryption into the 
ciphertext message M that is transmitted from the cryptographic device 
(Crandall: figure 12 and column 20 lines 25-41: generate ciphertext and 
send it); and 
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(b) for delivering the plaintext message P obtained by decrypting 
the ciphertext message M received by the cryptographic device (Crandall: 
column 20 lines 42-52 and figure 12); and 
(3) a ciphertext port that is coupled to one of said transceivers: 

(a) for transmitting the ciphertext message M to such transceiver 
(Crandall: figure 12: the cryptography device sends the ciphertext), and 

(b) for receiving the ciphertext message M fi-om such transceiver 
(Crandall: figure 12: the cryptography device receives the ciphertext). 

As per claim 1 1 and 20, Crandall further discloses the system of claims 10 and 19 
wherein said cryptographic unit which receives the ciphertext message M in storing the plurality 
of public quantities into the publicly accessible repository (Crandall: column 20 lines 15-24: 
stores publicly known information): 

(a) selects at least one receiver's secret quantity (Crandall: column 8 lines 16-20 and 
figure 3: receiver's public key is produced by using its private key); 

(b) selects for storage in the publicly accessible repository as part of the plurality of 
public quantities at least one selected public quantity (Crandall: column 15 lines 28-33); and 

(c) using the receiver's secret quantity and the at least one selected public quantity, 
computes and stores in the publicly accessible repository as part of the plurality of public 
quantities a plurality of computed public quantities (Crandall: column 15 lines 34-38 and column 
8 lines 16-20). 

As per claim 12-14 and 21-23, Crandall fiirther discloses the system of claims 1 1 and 19 
wherein the plurality of public quantities/computed public quantities/selected public quantity 
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include a plurality of vectors (Crandall: column 20 lines 15-24: sender's and receiver's public 
keys and curve parameter.., etc. ; column 8 lines 8-42: how public keys are generated). 

As per claim 15 and 24, Crandall further discloses the system of claims 1 1 and 19 
wherein the sending unit S, in computing the plurality of sender's quantities for transmission to 
the receiving cryptographic unit (Crandall: column 19 lines 42-48 and figure 12: ciphertext and 
signature are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the sender's 
private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of public 
quantities, computes for transmission to the receiving unit R the plurality of sender's quantities 
(Crandall: column 13 Hues 18-30: generate enciphering key to encipher the plaintext; column 19 
lines 42-48 and figure 12: ciphertext and signature are sent to the receiver as plurality of 
quantities). 

As per claim 16 and 25, Crandall further discloses the system of claims 15 and 24 
wherein the plurality of sender's quantities include a plurality of vectors (Crandall: column 19 
lines 42-48: the signature (u,P) is sent to the receiver; colunrn 16 - column 17: tv^o points on the 
curve; column 8 lines 35-36: form an abelian group). 

As per claim 17 and 26, Crandall further discloses the system of claims 10 and 19 
wherein the sending unit S, in computing the plurality of sender's quantities for transmission to 
the receiving cryptographic unit (Crandall: column 19 lines 42-48 and figure 12: ciphertext and 
signature are sent to the receiver): 
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i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the sender's 
private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of public 
quantities, computes for transmission to the receiving cryptographic unit the plurality of sender's 
quantities (Crandall: column 13 lines 18-30: generate enciphering key to encipher the plaintext; 
column 19 lines 42-48 and figure 12: ciphertext and signature are sent to the receiver as plurality 
of quantities). 

As per claim 18 and 27, Crandall further discloses the system of claims 17 and 16 
wherein the plurality of sender's quantities include a plurality of vectors (Crandall: column 19 
lines 42-48: the signature (u,P) is sent to the receiver; column 16 - column 17: two points on the 
curve; column 8 lines 35-36: form an abelian group). 

As per claim 28, Crandall discloses a protocol for communication in which a sending unit 
S transmits onto the communication channel I a message "M" together with a digital signature 
(Crandall: summary: communication channel; column 19 lines 42-48: send ciphertext and digital 
signature), and, wherein before transmitting the message M and the digital signature, the sending 
unit S transmits for storage in a publicly accessible repository a plurality of public quantities 
(Crandall: column 20 lines 15-24: store publicly known information), a method by which a 
receiving unit R that receives the message M and the digital signature verifies the authenticity of 
digital signature (Crandall: column 16 lines 63-67: authenticate the digital signature) comprising 
the steps performed by the receiving unit R of: 

a. retrieving the pluraHty of public quantities from the publicly accessible repository 
(Crandall: column 17 lines 1-50); 
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b. using the digital signature and the plurality of pubhc quantities, evaluating expressions 
of at least two (2) different verification relationships (Crandall: column 17 lines 44-50: two 
different equations); and 

c. comparing pairs, of results obtained by evaluating the expressions of the at least two 
(2) different verification relationships (Crandall: column 17 lines 49-50: the digital signature is 
assumed authenticated when Q and R match). 

As per claim 29, Crandall further discloses the method of claim 28 wherein the plurality 
of pubhc quantities include a plurality of vectors (Crandall: column 19 lines 42-48: the signature 
(u,P) is sent to the receiver; column 16 - column 17: two points on the curve; column 8 lines 35- 
36: form an abehan group). 

Response to Arguments 

5. Applicant's arguments filed 7/12/2004 have been fully considered but they are not 
persuasive. 

Regarding to applicant's arguments, applicant argues that the storage of any information 
or data into the public source either by a sender or by a receiver is not disclosed in the Crandall 
reference in its text or implicitly. However, Crandall discloses the public source contains the 
public keys of the sender and receiver, which inherently discloses that the public keys are 
transmitted by the sender and receiver. On the other hand, applicant argues that storage of 
plurality of public quantities in a publicly accessible repository. However, Crandall reference 
discloses the plurality of public quantities in column 13 lines 9-18: the publicly known 
information such as the public keys, the initial point, the field Fpk, and the curve parameter "a". 
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Therefore, the pubHcly known information is not only restricted to the public keys. Therefore, 
the applicant's arguments are respectfully traversed. 

Conclusion 

6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS fi'om the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE -MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated fi"om the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS fi:'om the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications fi"om the 
examiner should be directed to Shin-Hon Chen whose telephone number is (571) 272-3789. The 
examiner can normally be reached on Monday through Friday 8:30am to 5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
AppUcation Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or PubHc PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner 
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